PDA

View Full Version : Need help with a suspicious e-mail that keeps coming up?



LA_MERC_YellowDog
November 16th, 2011, 07:04 PM
OK, i've copied and pasted the email content in here so you guys can give me your input.

It keeps coming back .. or appears to be coming back from the same address?

I'm not sure whats going on, but I've gotten it multiple times for the last several days.

Its the same content every time, same address and all.


This message was created automatically by the mail system (ecelerity).

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

>>> dsghjytyt@yahoo. com (reading confirmation): 554 delivery error: dd
>>> This user doesn't have a yahoo.com account (dsghjytyt@yahoo. com)
>>> [-5] - mta1023.mail.sk1.yahoo. com

There are 2 (.txt) files attached to the e-mail. "I have not opened them :)"

LA_MERC_FragFood
November 16th, 2011, 11:18 PM
OK, i've copied and pasted the email content in here so you guys can give me your input.

It keeps coming back .. or appears to be coming back from the same address?

I'm not sure whats going on, but I've gotten it multiple times for the last several days.

Its the same content every time, same address and all.



There are 2 (.txt) files attached to the e-mail. "I have not opened them :)"

Couple things:
1 - This is a common way to get spam emails or other maliciuous content through various filters. Think "Gee, my user needs to know that their email didn't go through! Deliver this!" Not that hard to forge.

2 - Really need to see the full header from the email to see anything else.

3 - Create a filter and continue to ignore.

LA_MERC_YellowDog
November 17th, 2011, 10:37 AM
Well, I figured its some kind of spam.. but what ever its not legit. I use Outlook, so I guess the next thing to do it filter it out.

LA_MERC_YellowDog
November 17th, 2011, 06:06 PM
Got it set up in rules to permanently delete it. So hopefully I wont even see it hit my in box... period:)

LA_MERC_th33_r00k
November 18th, 2011, 11:46 AM
Change your password to your email account to a good complex one different than it is now. See if that changes things.

42d3e78f26a4b20d412==